Lucene search
+L

496 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 4:29 a.m.•7 views

Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
HackRead
HackRead
•added 2025/10/27 10:00 p.m.•16 views

Advanced Serverless Security: Zero Trust Implementation with AI-Powered Threat Detection

Serverless architectures have fundamentally altered the cybersecurity landscape, creating attack vectors that traditional security models cannot address. After…...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/10/20 12:00 a.m.•12 views

The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment

Serverless computing has rapidly emerged as a prominent cloud paradigm, enabling developers to focus solely on application logic without the burden of managing servers or underlying infrastructure. Public serverless repositories have become key to accelerating the development of serverless...

7.1AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-26986

Malware in sbrugna...

7.5CVSS7.4AI score0.0082EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2021-2069

Malware in sbrugna...

9.8CVSS8.1AI score0.0146EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-0757

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0075EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-0566

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00618EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•30 views

EUVD-2025-31664

Malicious code in bioql PyPI...

10CVSS6.6AI score0.00367EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-0944

Malicious code in bioql PyPI...

5.3CVSS5.5AI score0.00669EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-2512

Malicious code in bioql PyPI...

3.1CVSS4.4AI score0.00591EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-1586

Malicious code in bioql PyPI...

9.1CVSS6.4AI score0.00489EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/02 8:39 p.m.•28 views

CVE-2025-61584

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7.2AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/30 11:37 a.m.•32 views

CVE-2025-61584

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS0.00367EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/30 12:12 a.m.•41 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS0.00367EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/30 12:12 a.m.•80 views

CVE-2025-61584

serverless-dns (versions up to 0.1.30) contains a vulnerability in the pr.yml GitHub Action where unsafe input (github.event.pull_request.head.repo.clone_url and github.head_ref) is interpolated into a command executed by the runner. Because the action uses the pull_request_target trigger, it run...

10CVSS7AI score0.00367EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/30 12:12 a.m.•7 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7AI score0.00367EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/30 12:12 a.m.•18 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7.3AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/30 12:00 a.m.•16 views

serverless-dns 命令注入漏洞

serverless-dns is a DNS resolver from serverless-dns open source. A command injection vulnerability exists in serverless-dns version 0.1.30 and earlier, which stems from the pr.yml GitHub Action inserting untrusted input in an insecure manner, which could lead to the execution of attacker code...

10CVSS7.5AI score0.00367EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/30 12:00 a.m.•1 views

CVE-2025-61584: Improper Neutralization of Special Elements used in a Command

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS6AI score0.00367EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/30 12:00 a.m.•21 views

PT-2025-39926

Name of the Vulnerable Software and Affected Versions serverless-dns versions through 0.1.30 Description serverless-dns is a RethinkDNS resolver that deploys to various platforms including Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. A flaw exists where the pr.yml GitHub Action interpolat...

10CVSS7.1AI score0.00367EPSS
SaveExploits0References7
Rows per page
Query Builder